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Abstract. We present an efficient reduction from the Bounded integer programming (BIP) to the 
Subspace avoiding problem (SAP) in lattice theory. The reduction has some special properties with 
some interesting consequences. The first is the new upper time bound for BIP, poly(ip) ■ n n +°( n ) 
(where n and tp are the dimension and the input size of the problem, respectively). This is the 
best bound up to now for BIP. The second consequence is the proof that #SAP, for some norms, 
is #P-hard under semi-reductions. It follows that the counting version of the Generalized closest 
vector problem is also #P-hard under semi-reductions. Furthermore, we also show that under some 
reasonable assumptions, BIP is solvable in probabilistic time 2°( n ). 
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1. Introduction. Bounded integer programming is a familiar problem with| 
many computer scientists and mathematicians. BIP asks for an integral vector x sat- 
isfying the system Ax = b of equations and some constraints < x < u. If there is no 
upper bound on the variables, it is called Integer Programming (IP). It is called the 
Bounded Knapsack Problem (BKP) if BIP has unique equation. If there is no upper 
bound on the variables in BKP, then it is called the Knapsack Problem (KP). These 
problems are extensively surveyed in the literature, [10]. However, up to now they 
still need much time to be solved. 

In 1983, Lenstra [7] first showed that IP is solvable in polynomial time when the 
dimension is fixed. After this breakthrough result, researchers continue to improve 
it and thus many substantial improvements were proposed. The most remarkable 
result is from [5], where Kannan showed that IP is solvable in deterministic time 
poly{ip) ■ n . In his proof of this time bound, lattice problems and approximating 
subspaces play an important role. 

Recently, Khoat [6] showed that BIP is solvable in deterministic time poly(ip) ■ 
n 2"+o(n). Moreover, there are some more interesting results for some other problems. 
For example, IP in standard form was shown to be solvable in time poly(ip) ■ n n +°( n ) . 
He obtained these results by reducing these problems to KP, and then reducing KP 
to SAP, a lattice problem. The reduction from IP to KP is almost efficient in the 
sense that it preserves the time bound. However, the reduction from BIP to KP 
is inefficient. The reason is that the number of variables increases doubly after the 
reduction. Thus, the time bound can not be preserved. 

The aim of this paper is to reduce the time bound for BIP by trying to attack 
it in another way. It is known that there is a reduction from BIP to BKP, which 
preserves the number of variables [4] . Thus, the time bound for BKP is applicable to 
BIP. For this reason, we are going to reduce BKP directly to SAP in lattice theory. 
The reduction works for both l\ norm and t x norm, and increases the dimension to 
2n + 2, where n is the dimension (number of variables) of BKP. In [6], the reduction 
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from BKP to SAP uses KP as an intermediate problem, and increases the dimension 
to An + 2. Consequently, the reduction here is more efficient. 

The reason for our effort in reducing BKP to SAP is that SAP is efficiently 
reducible to the Closest Vector Problem (CVP) (see [8]), and that CVP can be 
"efficiently" solved. Indeed, CVP for I2 norm is solvable in deterministic time 
poly(tp) ■ n n / 2 +°(") ( S ee [3]). Furthermore, it is also the time that we need to solve 
CVP for l\ norm (see Disci in the Appendix). Therefore, we obtain the new time 
bound poly {(f) ■ n ™+°( n ) for BKP (and BIP). 

Another motivation of this paper is the question whether integer programming is 
solvable in time 2°( n \ This is an interesting open question. There are many lattice 
problems that can be solved within this time bound, and the reductions from BIP 
(IP) to lattice problems give an evidence for the positive answer. However, the right 
answer may need some complicated tools. In section 4, we study some classes of BIP 
that are solvable in probabilistic time 2°( n \ 

We should mention more about our reduction before presenting it in detail. The 
reduction from BKP to SAP for l\ norm (or norm) is almost parsimonious. Specif- 
ically, each solution to SAP corresponds to a solution to BKP; on the other hand, 
each solution to BKP corresponds exactly to two solutions to SAP. Therefore, #BKP 
may be reducible to #SAP for l\ norm (or norm). Combining this with the fact 
that #BKP is #P-complete, we have a strong evidence that #SAP is #P-hard. The 
same holds for the Generalized closest vector problem in lattice theory. To our best 
knowledge, this is the first result on the hardness of #SAP and #GCVP. 

The paper is organized as follows: section 2 presents the reduction from BIP to 
SAP and the new time bound for BIP. Some properties of the lattice of the new SAP 
are also investigated. Section 3 is dedicated to discussing the hardness of #SAP and 
#GCVP. Some special classes of BIP that can be further improved the time bound 
are presented in section 4. 

2. Reduction from BIP to SAP. This section presents the main result: the 
reduction from BIP to SAP, and the new time bound for BIP. First of all, we recall 
some definitions and some conventions. 

Definition 2.1 (Subspace Avoiding Problem - SAP). 

Input: a basis B of the lattice L, a subspace M C W l . 

Output: the shortest vector v € L\M . 
Definition 2.2 (Closest Vector Problem - CVP). 

Input: a basis B of the lattice L, a target vector tCl*. 

Output: the vector v € L closest to t. 
Definition 2.3 (Generalized Closest Vector Problem - GCVP). 

Input: a basis B of the lattice L, an affine space A in span(L), and a vector 

t G span(L). 

Output: the vector u G L\A closest to t. 

Note that the length of a vector or the distance between two vectors mentioned in 
the above lattice problems is for l p norm, p > 1. We refer to [8] for other definitions 
in lattice theory. 

Definition 2.4 (Bounded Integer Programming - BIP). 
Find a vector x e Z" satisfying 



(2.1) 
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Where A is an m x n integral matrix, b is a vector in Z m , and u is a vector in 

Definition 2.5 (Bounded Knapsack Problem - BKP). 
Find a vector ieZ" satisfying 

aiXi + • • • + a n x n = b 
< x < u 



(2.2) 

Where the coefficients are positive integers. 



We denote by [n] the set {1,2, ...,n}, by \\x\\ p the length of vector x for £ p norm 
(p > 1), an d by 1 1 a; 1 1 the length of vector x for norm. If there is no more explanation, 
Bx denotes the product of a matrix B with a column vector x. If x and u are vectors 

in R™, then - denotes the vector ( 

It is easy to see that BIP is reducible to BKP (e.g. we can use Kannan's technique 
in [4] to aggregate the equations in BIP). Moreover, the reduction from BIP to BKP 
preserves the dimension (number of variables) . Thus, we may say that they have the 
same properties. 

Theorem 2.6. There exists a deterministic polynomial time reduction from BKP 
to SAP for loo norm. Furthermore, the reduction increases the dimension by n + 2, 
where n is the dimension of BKP. 

Theorem 2.7. There exists a deterministic polynomial time reduction from BKP 
to SAP for l\ norm. Furthermore, the reduction increases the dimension by n + 2, 
where n is the dimension of BKP. 

Corollary 2.8. There exists a deterministic polynomial time reduction from 
BIP to SAP for £i norm. Moreover, the reduction increases the dimension by n + 2, 
where n is the dimension of BIP. 

Combining this fact with the results in [8] , BIP is reducible to CVP for l\ norm. 
Moreover, the reduction increases the dimension to 2n + 2. From the fact that CVP 
for £i norm is solvable in deterministic time poly(ip) ■ n n / 2 + o( - n ) ( see r_)i sc 1 in the 
Appendix), we have the following result. 

Theorem 2.9. BIP is solvable in deterministic time poly(<p) ■ n n +°( n ) ^ where n 
and tp are the dimension and the size of the input, respectively. 

Now we present the reduction from BKP to SAP. The argument is similar to 
the one in [6]. Assume that we are given BKP (2.2). Without loss of generality, we 
assume that < b for all i e [n]. Moreover, we assume that Y^ij=i a j u j 2&. This 
assumption can be guaranteed by making some simple modifications to (2.2) or by 
reducing it to new BKP satisfying the assumption, e.g. see Disc 2 in the Appendix. 
Then we will deal with the subspace S = {x e M 2n+2 : a\U\Xi + • • • + a n u n x n = 0}. 
Consider the lattice L generated by the basis B , where 



Bo 



is a (2n + 2) x (2n + 2) matrix; U n — diag(^, is a diagonal matrix of size 

n; a — (a±, a n ), 5 — u\...u n , Si — 5/ui,\/i, it max = max{ui, u n }; so, Si and A are 
optional integers satisfying s > n 2 ,si > n 2 ,A > Sn 3 u max ; C = (Si, S 2 \, 5 n \ n ~ 1 ), 
and 7= 1 + A + - • - + A™. 
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First and foremost, some special properties of L should be presented in order to 
prove the above theorems and to survey the hardness of some counting problems in 
the next section. 

Lemma 2.10. For any vector y = B a z G L , if y does not satisfy one of the 
following conditions 

(2.3) y n+1 = y 2n +2 = 



(2.4) y l + y n +i+i = z n+1 , Vi G [n] 

then y has at least one coordinate with magnitude not less than Q(p), where p = 
min{s , Si,X/(Snu max )}. 

Proof. We rewrite the vector y G L in more detail: for all i G [n] 

(2.5) Vl = * 

Ui 



(2.6) y n+ i = s ( ^2 a i z 3 ~ bZn + 1 

u' =1 



/o n\ z n+l+i 
(2-7) Vn+l+i = 



(2.8) 



y2n+2 



s i (E"=i s j^ j lz i + Ej=l lz n+l+] + SX n z n+1 - 7Z 2n+2 ) 



s i (E"=i s j^ j 1 ( z i + z n+l+j) + SX n z n+1 - 7Z 2 „ +2 ) 



It is easy to see that if y n +i ^ then y n +i is a nonzero multiple of s - This 
means |y n +i| > sq > p. The same holds for y 2n + 2 . 

Now assume that y does not satisfy (2.4), but (2.3). Then there exists i G [n] such 
that yi + y n +i+i ^ z n +i- From (2.5) and (2.7), vector z holds the same property, i.e. 
Zi+z n+1+i ^ UiZ n+1 or 5 l (z l +z n+1+l ) ± 5z n+1 . By the assumption y n+1 = y 2n +2 = 0, 
we have 

n 

(2.9) ^2a jZj = bz n+1 

3=1 



(2.10) J2 S i X3 l ( z i + Zn +i+i) + SXUz n+i = JZ 2n +2 

3=1 

Let w = (wi, w n +i) G Z™ +1 such that u>i = 5i(zt + z n+1+i ),Vi G [n], and 
Wn+i = &Zn+i- Equation (2.10) can be rewritten by: 

n 

(2.11) Xi ~ lw 3 + ^ W n+1 = lz 2n+2 

3 = 1 
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We see that there exists i, Wi ^ w n+ i (due to the known property of z). That is, 
w is an integral solution to (2.11) other than (z2n+2i ■ z 2n+2)- By Lemma 4.7 in the 
appendix, w has at least one component whose absolute value is not less than 0(A). 
From this fact, we can finish the proof by examining the following cases: 
Case 1: \w n+1 \ > 9(A) 

We immediately have |<5z„+i| > 6(A); thus, \z n +i\ > 9(A/<5). From the fact 
that Oi < 6,Vi G [n], every integral solution to (2.9) has at least one component 
z h (h e [n]) such that \z h \ > Q(X/6n). This implies \y h \ > e(X/6n Ui ) > 9(p). The 
desired property of y follows. 
Case 2: \wi\ > 9(A), for some i G [n] 

This case leads to 8 \zi + z rl +i+i| > Si \zi + z n+ i +i \ > 9(A). It is not hard to see 
that either \zi\ > 9(A/<5) or |z n+ i +i | > 9(A/<5). From (2.5) and (2.7), we have either 
\Ui\ > @{X/Sui) or \y n+ i +i \ > @{X/Sui). The proof ends. □ 

Lemma 2.11. Suppose that (2.2) has solutions. For every y* G Lq\S, either 
(uiyl,...,u n y^) or -{uiy{, ...,u n y* n ) is a solution to (2.2) if\\y*\\ < 1. 

Proof. From lemma 2.10, y* — Bqz satisfies (2.3) and (2.4). Then we immediately 
have 

n 

(2.12) ^ a 3 Z 3 = bz n+l 

(2.13) y* +y* +1+i =z n+1 , Vie [n] 

From the hypothesis y* G Lq\S, y* cannot be in S\ That is, a jUjy* ^ 0; 

thus Y^j=i a j z j 0- Combining this fact with (2.12) yields z n+1 ^ 0. From (2.13), it 
is not hard to see that if \z n+ \\ > 2, then either \y*\ > 1 or > 1. This means 

\\y*\\ > 1, contrarily. Consequently, the remainder of the proof is to consider the case 
< \z n+ i\ < 2. 

Assume that z n+i = 2. (The case z n+i = —2 can be dealt with similarly.) Then 
we have y* + yn+i+i = 2, Vi € [n]. An immediate observation is that if y* = yn+i+i 
I . \/i g [n], then Zi = z n +\+i = Ui, \/i G [n]. From (2.12) we have Y]"—i ®j u j = 26, 
being contrary to the assumption Y^j=i a j u j ^ Hence, there exists r G [n] such 
that either \y*\ > 1 or |y^ + i +r | > 1- This leads to \\y*\\ > 1, contrarily. 

If z n+ i = 1, then we have YTj=\ a j z j = b and V* + Vn+i+i = ( z i + z n+i+i) /u t 
I . \/i g [n]. That is, Y^j=i a j z j = b and z % + z n+i+i = u-i, \/i G [n]. From this fact, 
the first remark is that if there exists r G [n] such that z r < 0, then z n+ i +r > u r , 
and thus y* +1+r > 1. This means ||y*|| > 1, contrarily. Another remark is that if 
there exists r G [n] such that z r > u r , then y* > 1. This means ||y*|| > 1, contrarily. 
Consequently, < Zi < Ui, \/i G [n]. That is, (zi, z 2 , z n ) is a solution to (2.2). 
Equivalcntly, [u\y\, ...,u„y*) is a solution to (2.2). 

By the same argument we can show that if z n+i = —1, then — (itij/*, ...,u„y*) is 
a solution to (2.2). The lemma follows. □ 

From this property, we remark that the shortest vectors in Lq\S for norm 
should have length not greater than 1. Indeed, a careful observation reveals that if 
x is a solution to (2.2), then y — (^,0,e— f,0) is a vector in L \S, and ||y|| < l. 1 
Therefore, \\y*\\ < \\y\\ < 1 if y* is the shortest vector in Lo\S for norm. These 
facts quickly leads to the following corollary. 



iHere e= (1, !,...,!) 6 1". 
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Corollary 2.12. Suppose that (2.2) has solutions. If y* is the shortest vector 
in L \S for norm, then either [u\y\, ...,u n y*) or —(uiyl, ...,u n y*) is a solution 
to (2.2). 

From these observations, the claim of theorem 2.6 is easily proven. 

Proof. [Proof of theorem 2.6] Notice that Corollary 2.12 implies a reduction from 
BKP to SAP for loo norm. Moreover, any parameters including sq, si, A can be chosen 
in time polynomial. Thus, the reduction is a Karp one. The dimension of the lattice 
Lq is 2n + 2. Hence, it is also the dimension of the new SAP. Consequently, theorem 

2.6 follows. □ 

We now return to Theorem 2.7. To prove it, we need some other observations 
about Lq. From the arguments in the proof of Lemma 2.11, we remark that || 2/* || ! = n. 
Indeed, if z n+1 = 1 then y* > 0, Vj, y* n+1 = yl n+2 = 0, y*+y* n+1+l = l,Vi e [n] , and 

thus Wy*^ = Y^lt 2 \Vj \ = Ej=t 2 2/j = n - If z n+i = -1, then y* < 0, Vj, y* l+1 = 
V2n+2 = 0, V* +Vn+i+t = -l,Vi G [n], and thus Wy*^ = n. In short, ||y*||i = n if 
||y*|| < 1. This observation leads to the hope that if a lattice vector y E Lo\S has 
length not greater than n for l\ norm, then it gives a solution to (2.2). Fortunately, 
it is the case. 

Lemma 2.13. Suppose that (2.2) has solutions. Then a lattice vector y* is the 
shortest in Lq\S for l\ norm if and only if \\y*\\i — n. Moreover, if y* is the shortest 
vector in L \S for l\ norm, then either (uiy*,...,u n y*) or —(uiyl,...,u n y*) is a 
solution to (2.2). 

Proof. As mentioned earlier, y — 0, e— 0) is a short vector in L \S if a; is a 
solution to (2.2). Moreover, Wy^ = n. Therefore, a short vector in L \S should have 
length not much larger than n. 

Assume that y* is the shortest vector in L \S for l\ norm. Then ||y*||i < ||y||i = 
n. Combining this with Lemma 2.10, y* = B z satisfies both (2.3) and (2.4). Thus, 
by the hypothesis y* (£ S, we have Vi = E"=i Vi + E"=i Vn+i+i = nz n+i, 

where z n+ \ 7^ 0. This means ||y*||i > n|z„ + i| > n. Hence, ||y*||i = n. 

If l|y*l|i = n i tncn V* must be the shortest vector in Lq\S. Indeed, for every 
y 1 = Bqz 1 e L \S, if y 1 does not satisfy either (2.3) or (2.4), then H3/ 1 1| 1 > 9(p) > n 
(where p = min{s , Si, A/((5nu max )}). Otherwise, we have y\ + y„ +1+i = ^ +1 ,Vz e 
[n], where z^ +1 ^ 0. This means Wy 1 ^ > lY^Zi 2 Vi \ — n \ z n+i\ ^ n - I n short, 
II 2/ 1 II 1 > n for ever y V 1 £ L \S. As a result, \\y*\\i < \\y\\i for all y e L \S. That is, 
y* is the shortest vector in L \S for l\ norm. 

Suppose that y* is the shortest vector in L \S for i x norm. By the above ob- 
servations, we have ||y*||i = n. This means |z n +i| = L By the same arguments as 
(in the last two paragraphs) in the proof of Lemma 2.11, the last statement of this 
lemma follows. □ 

Proof. [Proof of theorem 2.7] Notice that Lemma 2.13 implies a reduction from 
BKP to SAP for l\ norm. Moreover, any parameters including so, s\, A can be chosen 
in time polynomial. Thus, the reduction is a Karp one. The dimension of the lattice 
Lq is 2n + 2. Hence, it is also the dimension of the new SAP. Consequently, theorem 

2.7 follows. □ 

Remark. We have the new time bound for BIP. Nonetheless, by binary technique, 
we can easily show that the optimization version of BIP has the same time bound. 
More concretely, consider the problem of finding a vector igZ" such that it minimizes 
c • x, subject to the constraints Ax = b and < x < u. Since the upper bound and 
lower bound of the objective function is easily obtained, we can use binary technique 
to reduce this problem to BIP. Note that reduction increases the number of variables 
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by 1. Thus, combining this facts with Theorem 2.9, we have the time bound n n+ °^ 
for the optimization version of BIP. 

3. Hardness of #SAP and #GCVP. This section is dedicated to presenting 
a survey of the hardness of the problem of counting the solutions to SAP for £ p norm. 
This problem is denoted by #SAP P . We also consider the problem of determining 
the number of solutions to GCVP for t v norm, denoted by #GCVP P . Since SAP is a 
special case of GCVP, the hardness of #SAP P implies the one of #GCVP P . 

Let us see more about the reduction in the previous section. Each short vector of 
L \S corresponds to a solution to (2.2) provided that (2.2) has solutions. 2 Conversely, 
assuming a; is a solution to (2.2), L \S must contain two short vectors corresponding 
to x in the sense that the head parts of these two vectors are similar to either ^ or 
— Moreover, every other short vector in L a \S cannot correspond to x in the same 
sense. These observations reveal that if every solution to (2.2) lies on the surface of 
the hypercube [0,u]={i£l":0<i< u}, 3 then counting the solutions to (2.2) is 
reducible to the one to SAP for norm as long as (2.2) has solutions. 

Lemma 3.1. #BKP under the assumption that BKP has solutions is reducible to 
#SAP X . 

To prove this lemma, we need the following observation. 

Lemma 3.2. If every solution to (2.2) lies on the surface of the hypercube [0, u], 
then the length of the shortest vector in Lq\S is 1. 

Proof. Assume that y* = Bqz is the shortest vector in Lq\S for norm. The 
arguments in the proof of Lemma 2.11 shows that y* +y„+i+i = Zn+i, where |z„+i| = 
1. By the hypothesis of y* , there exists x* being a solution to (2.2) such that x* = 
{u*\y*\, ...,«* \y* |). Note that x* lies on the surface of [0, it]; that is, 3x* e {0,Uj}. 
This means there exists \y*\ £ {0,1}; therefore, € {1,0}. Combining this 

with Lemma 2.11 yields \\y*\\ = 1. □ 

Proof. [Proof of Lemma 3.1] It is easy to see that some solutions to BKP (2.2) 
may not satisfy the assumption of Lemma 3.2. Thus counting the solutions to SAP 
for norm may be useless. However, some modifications to the original BKP may 
be worth. 

Assume that BKP (2.2) does not satisfy the assumption of Lemma 3.2. We reduce 
it to the new BKP as described in Disc. 2. The new BKP has the property that every 
solution to it has the last component's value being 1. That means the new BKP 
satisfies the assumption of Lemma 3.2. Therefore, applying the reduction from the 
new BKP to SAP yields the fact that every shortest vector in L \S for norm is of 
length 1 , and that each solution to the new BKP corresponds exactly to two solutions 
to SAP for norm. Consequently, the number of solutions to the new BKP would 
be revealed if one know the solution to #SAPoo. The proof completes. □ 

Note that Lemma 3.1 does not imply a reduction from #BKP to #SAPoo. The 
reason is that the solution to #SAPoo is always a non-zero number, whereas the one 
to #BKP may be zero. This is caused by some disadvantages of our reduction in the 
previous section. 

Definition 3.3. Let #A and #B be counting problems. Then #A is said to be 
semi- reducible to #B if the following satisfies. Assuming that the solution to #A is 
non-zero, solving #A needs polynomial calls to #B oracle. 



2 Here, by saying short vector we mean that the i^o length of the vector is not greater than 1. 
3 The vector x is said to lie on the surface of the hypercube [0,u] if there exists i g [n] such that 
Xi e {0, Ui}. 
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If #A is semi-reducible to #B, we say that there is a semi-reduction from #A to 

#B. 

This kind of reduction is quite weak since it only maps a counting problem with 
non-zero solution to another counting problem. The stronger kind of reduction for 
counting problems may be found in [9]. 

Turn to our problem, #SAPoo. Lemma 3.1 clearly implies the following result. 

Corollary 3.4. #BKP is semi-reducible to #SAP oa . 

It is well-known that BKP is NP-hard. The reduction from SAT to KP in [9], 
via numerous problems, can be made to be parsimonious. This means that #SAT is 
reducible to #KP. Note that #SAT is #P-complete (see Theorem 18.1 in [9]). Hence 
#KP is also #P-complete. Since KP is a special case of BKP, we conclude that 
#BKP is #P-complete. As a result, we have 

Theorem 3.5. #SAP QO is #P-hard under semi-reductions. 

Although this theorem does not imply the #P-hardness of #SAPoo, but it gives 
a strong evidence for the hardness of #SAPoo. We believe that #SAPoo is #P-hard. 
Nonetheless, with this technique we cannot prove that. 

By the same arguments, we can prove the following result for #SAPi. 

Theorem 3.6. #SAPi is #P-hard under semi-reductions. 

It is not hard to see that GCVP is SAP if the input affine space A is a subspace, 
and t = 0. Hence SAP is a special case of GCVP. By Theorem 3.5 and 3.6, we obtain 
the same results for GCVP. 

Theorem 3.7. #GCVP 1 and #GCVP oc are #P-hard under semi-reductions. 

4. BIP under some assumptions. We continue to study some classes of BIP 
for which there exist algorithms running in probabilistic time 2°( n \ It is well-known 
that BIP is NP-hard; thus, it is likely that there is no polynomial time algorithm for 
BIP. However, real-life applications expect lower time bound for BIP. This demand 
motivates us to find more efficient algorithms for it. We believe that BIP is solvable in 
time 2°(™). Nonetheless, here we are only able to show this property for some classes 
of BIP. 

In section 2, we know that BKP is reducible to SAP for norm. Thus, the time 
bound for the new SAP is applicable to the original BKP. It is clear that there are 
many algorithms for SAP (see [1], [2], [8]); however, the time bound for general SAP 
is quite large. Fortunately, SAP can be solved in time 2°^ if it has some special 
properties, as shown in [2]. 

Theorem 4.1. (Blomer and Naewe). Let L be a lattice and M be a subspace 
of span(L). Assume that there exist absolute constants c,e such that the number of 
v e L\M satisfying \\v\\ < (1+e)\m{L) is bounded by 2 cn , where \m{L) is the length 
of the shortest vector in L\M . Then there exists an algorithm that solves SAP with 
probability exponentially close to 1. The running time is 2°( n \ 

This theorem shows that if the number of short lattice vectors in L\M is not too 
large, we may solve SAP in time 2°( n \ On the other hand, if the exact solution to 
SAP is not necessary in some cases, we can find an approximate solution to SAP in 
almost same time. 

Theorem 4.2. (Blomer and Naewe). There exists a randomized algorithm that 
solves SAP with approximation factor 1 + e, < e < 2, with probability exponentially 
close to 1. The running time is ((2 + 1 / ' e) n .b)°^\ where b is the input size of the 
problem. 

We know that the new SAP resulted from our reduction may not satisfy the 
assumptions in Theorem 4.1, and that the approximate solutions to the new SAP 
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may not give any solution to the original BKP. Consequently we cannot expect to 
improve the time bound for BKP. However, if the original BKP has some special 
properties, then it can be " efficiently" solved. 

Theorem 4.3. Assume that BKP (2.2) has a solution x such that |j- € [j^, jr^],Vi 
[n], for some absolute constant e € (0, 1]. Then there exists a randomized algorithm 
that solves BKP with probability exponentially close to 1. The running time of the 
algorithm is poly(ip) ■ 2°( n \ where ip is the size of the input. 

This theorem means that BKP is solvable in probabilistic time poly(tp) ■ 2°^ if 
it has a certain solution lying rather closely to the center of the hypercube [0,u]. The 
same holds for BIP. 

Corollary 4.4. Assume that BIP (2.1) has a solution x such that — £ 

[i+£> 1^7])^ € [n], for some absolute constant e G (0, 1]. Then there exists a random- 
ized algorithm that solves BIP with probability exponentially close to 1. The running 
time of the algorithm is poly (ip) ■ 2°( n \ where tp is the size of the input. 
Proof. [Proof of Theorem 4.3] 

It is not hard to see that if u max is small, e.g. 0(1), then we can solve BKP 
by enumerating all possible vectors in [0, it] fl Z". The time we need to do this is 
°«,ax) = 2 ° (n) - Thus > without loss of generality, we assume that it max is not too 
small. Then the following is straightforward. 

(4.1) 1 - " m " + 1 - < 



«max(l + e) 1 + e 
On the other hand, due to 1 < 1 + l/u max , we have 

(4.2) — < Umax + 1 



l+£ Umax(l+e) 

If we combine the assumption of x with (4.1) and (4.2), then 

/ . „\ -, "max + 1 %i "max + 1 w . r 
(4.3) 1 < — < -, Ml e n 

Umax(l+£) Ui Umax(l+£] 

Applying the reduction from BKP to SAP as in section 2, we obtain the new 
SAP. Let the new SAP be the centre of our concentration from now on. 

Notice that the vector y = 0, e — ^, 0) is in L \S, and that ||y|| — max{|| ^|| , ||e ■ 
Combining this with (4.3) yields 

(4-4) ||d|| < ■ 



+ 1 



x(l + e) 

Consider any vector y = Bqz in Lq\S such that (u\ \yi\ , u n \y n \) is not a 
solution to (2.2). From Lemma 2.11, there exists r such that \y r \ > 1. If y does 
not satisfies cither (2.3) or (2.4), by Lemma 2.10 we have \\y\\ > 2 > 1 + 1/M ma x- 
Otherwise, + 1 and r ^ 2n + 2. This means \y r \ — \z r /u r * \ > 1; cquivalcntly, 

\z r \ > u r *. From the fact that z r e Z, we immediately have \z r \ > u r , + 1. These 
observations yield 

u r . + 1 1 1 

\Vr\ > — > 1 + > 1 



max 



4 Here, r* = r if r < n\ otherwise, r* = rmod (n + 1). 
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Therefore, 



(4.5) 



Nl>i + 



1 



Combining (4.4) with (4.5) leads to \\y\\ < \\y\\ / (1 + e); equivalcntly, ||y|| > 



Let y* be a solution to the new SAP (the shortest vector in L \S). Then \\y*\\ < 
\\y\\. That is, \\y\\ > (1 + e) \\y*\\ for all y e L \S such that (m \yi\ , ...,u n \y n \) is not 
a solution to (2.2). This implies that an approximate solution to the new SAP within 
the factor 1 + e is sufficient to give a solution to (2.2). In other words, BKP (2.2) is 
reducible to the problem of approximating SAP within a factor of 1 + e. 

If we know e, then the new SAP can be approximated by SAP solver in [2] to 
find a solution to (2.2), and the running time is poly(ip) ■ 2°( n > (due to Theorem 4.2). 
Conversely, we can find a solution to (2.2) as follows: repeat approximating the new 
SAP (by SAP solver in [2] ) correspondingly with approximation factors 2,1+^,1+ j, ... 
until we find a solution to (2.2) from approximate solutions of the new SAP. Since 
any approximate solution to the new SAP within the factor 1 + e is sufficient to give 
a solution to the original BKP, the number of repeat loops that we need to solve (2.2) 
is at most log 2 (l/e). Therefore, the total running time is T = T. log 2 (l/e), where T 
is the running time of each repeat loop. Note that e is a certain absolute constant. 
Consequently, we have T = 0(T). The claim of the theorem is clear. □ 

Another property of BKP also allows the possibility of solving it in time 2°^ n \ 

Theorem 4.5. Assume that there exist absolute constant c,e such that the num- 
ber of integral vectors x being in the hyperplane P={ieR": a\X\ H Ya n x n = b} 

and satisfying \\x/u\\ < 1 + e is bounded by 2 cn . Then there exists a randomized al- 
gorithm that solves BKP (2.2) with probability exponentially close to 1. The running 
time of the algorithm is 2°(") . 

This theorem shows that if integral vectors of the hyperplane of BKP spread out 
sparsely, then we can hope to solve BKP " efficiently" . Furthermore, this theorem 
also implies that BKP can be solved in time 2°( n ) if the number of solutions to it is 
not very large, e.g. 2 cn . This is also the case for BIP. 

Corollary 4.6. Assume that there exist absolute constant c,e such that the 
number of integral vectors x being in P = {x el" : Ax = b} and satisfying \\x/u\\ < 
1 + e is bounded by 2 cn . Then there exists a randomized algorithm that solves BIP 
(2.1) with probability exponentially close to 1. The running time of the algorithm is 

2 0(n)_ 

Proof. [Proof of Theorem 4.5] 

If we chose the parameters so, s\, and 5 large enough, the resulting lattice Lo of 
the reduction in section 2 has the following properties. 

For each lattice vector y e L n \S of length at most 1 + e, there exists unique 
integral vector x e P such that \\x/u\\ < 1 + e and either x/u or — x/u is the head 
part of y. This property is easily derived from the observations in the proof of Lemma 
2.11. Conversely, for each vector x G P satisfying < 1 + e, there are at most 

two lattice vectors in L \S of ^ length at most 1 + e. 5 Moreover, the number of 
such vectors is bounded by 2 cn due to the hypothesis. Thus, the number of lattice 
vectors in Lq\S of length at most 1 + e is bounded by 2 cn+1 . Remember that, 
by Lemma 2.11, the shortest vector in L \S has length at most 1. This means 



5 One is ^,0, e — ^, 0^ and another is - ^,0, e — f ,0^. 
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the number of lattice vectors in L \S of length at most (1 + e)Xs(L ) is bounded by 
2 cn+1 , where Xs(Lq) is the length of the shortest vector in L \S for 1^ norm. From 
these observations, we may find the shortest vector in L \S in probabilistic time 2°(") 
(by Theorem 4.1). That is, BKP is solvable in probabilistic time 2° (n \ □ 

Conclusion. We obtain the new time bound for BIP; nonetheless, the time 
bound is still large. We believe that it can be substantially improved in both deter- 
ministic and probabilistic sense. An open question is whether there is a randomized 
algorithm for BIP running in time 2°^ ? Another one is whether there is a deter- 
ministic algorithm for BIP running in time 2°W ? it seems that the first question 
is easier than the latter due to the fact that many lattice problems have this time 
bound, and that our reduction is an evidence. 
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for sharing his result in [8], and for many helpful discussions on lattice problems. 
Thanks are also to Jin-Yi Cai for pointing me to the reference [2]. 

Appendix. The following lemma is an observation in number theory and was 
proven in [6] . 

Lemma 4.7. Let n, X,t be integers such that n is not a constant, |A| > 0(n),7 = 
1 + A + • • • + A™ . Then the Diophantine equation 

(4.6) xi + Xx 2 + ■ ■ ■ + X n x n+1 = *f.t 

has a solution of the form (t,t, ■■■,t), and every other integral solution must have at 
least one component whose absolute value is not less than 6(A). 
Proof. We can rewrite equation (4.6) as follow: 

(4.7) (xi - t) + X(x 2 -«) + ■■■ + A"(x„+i - t) = 
All integral solutions to (4.7) satisfy: 

Xi — t = X.ti 

(4.8) (x 2 - t) + X{x 3 - t) + ■ ■ ■ + X n ~ 1 (x n+ i -t) = -h 

where t\ is an integer. 

Similarly, all integral solutions to (4.8) satisfy: 

X2 — t = —ti + A.t 2 

(4.9) (x 3 - t) + A(x 4 - t) + ■ ■ ■ + A"" 2 (x„+i - t) = -t 2 

where i 2 is an integer. 

By induction, all integral solutions to (4.6) satisfy: 

Xi — t = X.ti 
x 2 - t = -t\ + X.t 2 
x 3 - t = -t 2 + X.t 3 



(4.10) 
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where t\,...,t n are integers. 

It is clear that if t\ = ■ ■ ■ = t n = 0, then (i, t) e Z n+1 is a solution to (4.6). 

Now we consider any other integral solution x to (4.6). There exist integers 
ti, ...jtn satisfying (4.10), and at least one t r satisfying t r ^ 0. 

Let ti be the first non-zero element in the sequence ti,...,t n , and t r be the last 
one. To observe the desired property of x easily, we should examine the following 
cases: 

Case 1: I > 1 

With this assumption, we immediately have xi = t, xi = t + X.ti. It is easy to see 
that if \xi\ < 6(A) then xi = 6(A.t ; ). If \xi\ < 0(A) then t = 6(A.i/); consequently, 
xi = Q(\.ti). In both cases, our claim is true. 

Case 2: r < n 

This case can be proved by the same argument as the one in Case 1. 
Case 3: I = 1, r = n (t 1 ^ 0, t n ^ 0) 

It is easy to see that either t = 0, which yields x\ = 6(Ati), or 3 \xi\ > 6(A) will 
lead to the desired property of x. 

Assume oppositely that \t\ > 0(A) > and \xi\ < 6(A), Vi G [n+1]. From (4.10), 
|x„+i| < 6(A) implies t n = t — x n+ i = 6(t), \x n \ < 6(A) implies i„_i = 6(t + \t n ) = 
Q{\t) (due to t n ^ 0),. . . , \x 2 \ < 6(A) implies h = G(t + Xt 2 ) = 6(A"- 1 t). By the 
assumption \xi \ < 6(A), we have t = 6(A£i) = 6(A ra £). A contrary to the assumption 
\t\ > 6(A) and |A| > Q(n) happens (due to the fact that n is not a constant and 
neither is A). 

Assume oppositely that \t\ < 6(A), t ^ and \xi\ < 6(A), Vi G [n + 1]. From 
(4.10), \x n \ < 6(A) implies \t n -i\ = \t - x n + Xt n \ > 6(A) (due to t n ^ 0),..., 
\x 2 \ < 6(A) implies = \t - x 2 + At 2 1 > 6(A™ _1 ). By the assumption \xi\ < 6(A), 
we have \t\ = \xi — Ati | = Q(Xti) > 6(A"). A contrary to the assumption \t\ < 6(A) 
and |A| > 6(n) happens. Consequently, the lemma follows. □ 

Disci: solving CVP for £i norm 

Let a target vector t and a basis H = (hi, h m ) of a lattice L be the input 
of CVP. Kannan's algorithm [5] for CVP (for £ 2 norm) is as follows. One chooses 
a suitable real r (Kannan [5] finds a KZ-reduced basis of L before choosing r) and 
considers the ball B(t, r), for which t and r are the center and the radius, respectively. 
One can enumerate all lattice points in LC\B(t,r), and then choose the point v closest 
to t as the output. It is not hard to see that if B(t,r) contains v e L closest to t 
for £ 2 norm, then the ball B(t, 2r) must contain u e L closest to t for l\ norm. 
Indeed, by the relation among norms, we have ||t — v|| 2 < ||t — u|| 2 < — u\ x < 
\\t — v\\i < \/2||i — v\\ 2 - Thus, with the ball B(t,2r), the enumeration step surely 
enumerates the vector it G L closest to t for i\ norm. This means that we can adapt 
Kannan's algorithm to solve CVP for l\ norm, with the caution that the bound 
should be doubled (2 A instead of A as chosen in [3]). Using the analysis of Hanrot 
and Stehle [3], we conclude that CVP for l\ norm is solvable in deterministic time 
poly(ip) ■ 2°(") • n n / 2+0 (") = poly(tp) ■ n n / 2+o{ - n \ 

Disc. 2: the assumption a j u j 26 

Assume now that the original BKP (2.2) satisfying X)j=i a j M i = 26- Then we 
reduce it to the new one satisfying our desire. The new BKP is as follows: 
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Find a vector x <G 27 l+1 satisfying 

{a^xi H h a' n+1 x n+1 = b' 
0<x<u 
< x n+1 < 1 

Where a'j — cij, for all j < n, a' n+1 = ?i max (n + 1)6, b' = b + w max (n + 1)6. 

It is not hard to see that solving the new BKP (4.11) is equivalent to solving 
(2.2). Indeed, if {x\, ...,x n , 1) is a solution to (4.11), then a\Xi + • • • + a n x n = b. 
This implies (x\, ...,x n ) being a solution to (2.2). Moreover, (x\, ...,x n ,0) cannot be 
a solution to (4.11) due to the fact that a\Xx + • • • + a n x n = b' means a contrary to 
the assumption aj < b,\/j < n. These observations imply that (xi, x n , x n+ \) is a 
solution to (4.11) if and only if (x\, x n ) is a solution to (2.2). 

Note that (4.11) satisfies Y^ij=i a 'j u 'j ^ ^ ■> w here u'j ~ Uj,\fi < n and u' n+1 = 1. 
This means the new BKP satisfies our desired assumption. 
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